- name: authorized_keys
  with_dict: "{{ borg_clients }}"
  authorized_key:
    user: borg
    manage_dir: False
    state: "{{ item.value.state }}"
    key: "{{ borg_ssh_keys[item.key].public }}"
    path: "{{ borg_basedir }}/.ssh/authorized_keys2"
    key_options: "command=\"cd {{ borg_basedir }}/repos; borg serve --append-only --restrict-to-path {{ borg_basedir }}/repos/{{ item.key }}\",no-port-forwarding,no-X11-forwarding,no-pty,no-agent-forwarding,no-user-rc"

- name: mkdir repos
  file:
    path: "{{ borg_basedir }}/repos"
    state: directory
    mode: u=rwx,go=
    owner: borg
    group: borg

#- name: mkdir repos/{{ item.key }}
#  with_dict: "{{ borg_clients }}"
#  file:
#    path: "{{ borg_basedir }}/repos"
#    state: directory